Title: Tornevall Networks DNSBL Implementation Author: tornevall Published: 13. November 2014 Last modified: 5. Juli 2026 --- Plugins suchen ![](https://ps.w.org/tornevall-networks-dnsbl-implementation/assets/icon-256x256. png?rev=3517985) # Tornevall Networks DNSBL Implementation Von [tornevall](https://profiles.wordpress.org/tornevall/) [Herunterladen](https://downloads.wordpress.org/plugin/tornevall-networks-dnsbl-implementation.3.1.5.zip) * [Details](https://de.wordpress.org/plugins/tornevall-networks-dnsbl-implementation/#description) * [Rezensionen](https://de.wordpress.org/plugins/tornevall-networks-dnsbl-implementation/#reviews) * [Installation](https://de.wordpress.org/plugins/tornevall-networks-dnsbl-implementation/#installation) * [Entwicklung](https://de.wordpress.org/plugins/tornevall-networks-dnsbl-implementation/#developers) [Support](https://wordpress.org/support/plugin/tornevall-networks-dnsbl-implementation/) ## Beschreibung Protect your WordPress site against comment spam, abusive registrations, and other unwanted submissions with Tornevall Networks DNSBL and FraudBL. The plugin is built to give site owners a practical anti-abuse layer without turning everyday moderation into a maintenance project.. Report issues and feedback: [GitHub issues](https://github.com/Tornevall/tornevall-wp-dnsbl/issues) Plugin URL: [WordPress.org plugin page](https://wordpress.org/plugins/tornevall-networks-dnsbl-implementation/) Documentation: [DNSBL API documentation](https://tools.tornevall.net/docs/dnsbl-api) #### Support and feedback Bug reports and feedback can currently be submitted via [GitHub issues](https://github.com/Tornevall/tornevall-wp-dnsbl/issues). Full Documentation: [DNSBL API documentation](https://tools.tornevall.net/docs/dnsbl-api) Translations can be contributed via [translate.wordpress.org](https://translate.wordpress.org/projects/wp-plugins/tornevall-networks-dnsbl-implementation). ## Screenshots [⌊Try-tests and self-check: direct DNS lookups for a specific IP plus a self-check of the current server and visitor address.⌉⌊Try-tests and self-check: direct DNS lookups for a specific IP plus a self-check of the current server and visitor address .⌉[ Try-tests and self-check: direct DNS lookups for a specific IP plus a self-check of the current server and visitor address. [⌊At a glance and visitor statistics: resolver status, selected trigger flags, whitelist state, Turnstile/registration protection status, and recorded DNSBL activity.⌉⌊At a glance and visitor statistics: resolver status, selected trigger flags, whitelist state, Turnstile/registration protection status, and recorded DNSBL activity.⌉[ At a glance and visitor statistics: resolver status, selected trigger flags, whitelist state, Turnstile/registration protection status, and recorded DNSBL activity. [⌊Core DNS lookup settings: preferred resolver hosts, cache age, cleanup interval, and the active blacklist trigger-flag profile including FraudBL-related flags.⌉⌊ Core DNS lookup settings: preferred resolver hosts, cache age, cleanup interval, and the active blacklist trigger-flag profile including FraudBL-related flags.⌉[ Core DNS lookup settings: preferred resolver hosts, cache age, cleanup interval, and the active blacklist trigger-flag profile including FraudBL-related flags. [⌊Protection behavior: comment hiding, redirect handling, safe IP whitelisting, blocked-visitor redirect URL, and admin notice styling.⌉⌊Protection behavior: comment hiding, redirect handling, safe IP whitelisting, blocked-visitor redirect URL, and admin notice styling.⌉[ Protection behavior: comment hiding, redirect handling, safe IP whitelisting, blocked- visitor redirect URL, and admin notice styling. [⌊Tools integration and development: diagnostics mode, frontend dry-run guidance, production/dev Tools mode selection, and token configuration.⌉⌊Tools integration and development: diagnostics mode, frontend dry-run guidance, production/dev Tools mode selection, and token configuration.⌉[ Tools integration and development: diagnostics mode, frontend dry-run guidance, production/dev Tools mode selection, and token configuration. [⌊Cloudflare Turnstile and registration protection: Turnstile settings for comments, the optional public delisting/removal flow, plus DNSBL/FraudBL and Turnstile protection for new WordPress account registrations.⌉⌊Cloudflare Turnstile and registration protection: Turnstile settings for comments, the optional public delisting/removal flow, plus DNSBL/FraudBL and Turnstile protection for new WordPress account registrations .⌉[ Cloudflare Turnstile and registration protection: Turnstile settings for comments, the optional public delisting/removal flow, plus DNSBL/FraudBL and Turnstile protection for new WordPress account registrations. [⌊Frontend dry run in action: admin-bar dry-run indicator, blocked-comments notice on the public site, and the floating dry-run status banner used for safe live testing.⌉⌊ Frontend dry run in action: admin-bar dry-run indicator, blocked-comments notice on the public site, and the floating dry-run status banner used for safe live testing .⌉[ Frontend dry run in action: admin-bar dry-run indicator, blocked-comments notice on the public site, and the floating dry-run status banner used for safe live testing. ## Installation 1. Upload the plugin archive to the `/wp-content/plugins/` directory 2. Aktiviere das Plugin in WordPress im Menü „Plugins“​ 3. Configure the plugin via admin control panel The installation creates a cache table in the WordPress database. This reduces repeated DNS lookups and helps avoid unnecessary load against blacklist services. Both blacklisted and non-listed lookups are cached. The default cache lifetime is 600 seconds and the cleanup interval is 300 seconds. The plugin also supports a safe IP whitelist. Whitelisted IP addresses are still checked and can appear in statistics, but they are not blocked, redirected or marked as spam. When possible, the activating visitor IP is seeded into that whitelist automatically during first-time setup. If the database schema becomes out of sync after an upgrade or a manual source-based install, deactivate and reactivate the plugin to recreate the required tables. ## FAQ * Can I get delisted? Yes. If you are blacklisted in Tornevall DNSBL, you can use [the removal page](https://www.tornevall.net/removal/)– otherwise, you can’t. * Can I host a delisting page? Yes. You can host the built-in form on any page with: ``` [dnsbl_removal_form] ``` But you need permissions for this, which can be gained by request via [https://tools.tornevall.net/](https://tools.tornevall.net/). ## Rezensionen Zu diesem Plugin liegen noch keine Rezensionen vor. ## Mitwirkende und Entwickler „Tornevall Networks DNSBL Implementation“ ist Open-Source-Software. Folgende Menschen haben an diesem Plugin mitgewirkt: Mitwirkende * [ tornevall ](https://profiles.wordpress.org/tornevall/) [Übersetze „Tornevall Networks DNSBL Implementation“ in deine Sprache.](https://translate.wordpress.org/projects/wp-plugins/tornevall-networks-dnsbl-implementation) ### Interessiert an der Entwicklung? [Durchstöbere den Code](https://plugins.trac.wordpress.org/browser/tornevall-networks-dnsbl-implementation/), sieh dir das [SVN-Repository](https://plugins.svn.wordpress.org/tornevall-networks-dnsbl-implementation/) an oder abonniere das [Entwicklungsprotokoll](https://plugins.trac.wordpress.org/log/tornevall-networks-dnsbl-implementation/) per [RSS](https://plugins.trac.wordpress.org/log/tornevall-networks-dnsbl-implementation/?limit=100&mode=stop_on_copy&format=rss). ## Änderungsprotokoll #### 3.1.5 * Fixed WordPress multisite/network registrations so the second `wp-signup.php` step can reuse the successful Turnstile check from step 1 instead of failing and sending the visitor back to the first step. #### 3.1.4 * Tested with WP7. * Registration Turnstile and DNSBL/FraudBL checks now also protect WordPress multisite/ network signups on `wp-signup.php`. #### 3.1.3 * Tested with WP7. #### 3.1.2 * Fixed the public removal-form Turnstile lifecycle so the widget waits for Cloudflare’s API before rendering, keeps the returned widget id, and uses that widget id for reset/response handling. * Fixed stale or empty Turnstile response handling by clearing tokens on expiration, timeout or error and recovering the current widget response before submit when the hidden token field is empty. * Released the Tools-backed site identity metadata and bumped the plugin release metadata to `3.1.2`. #### 3.1.1 * Added an explicit admin checkbox for Turnstile on the public delisting/removal page. * The public delist flow no longer inherits Turnstile automatically just because comment or registration Turnstile is configured. * Site owners can now disable only the removal-page challenge when Cloudflare Turnstile has temporary problems, while keeping comment and registration protection enabled. #### 3.1.0 * Added the plugin-side DNSBL write integration (`add`, `delete`, `update`, `bulk`) around one visible **Write token** field, bulk queueing, and optional dry-run acknowledgement through the Tools DNSBL endpoints. * Added the shortcode-based removal form (`[dnsbl_removal_form]`) with AJAX backend proxy support, built-in main removal-page templating, and live delisting-page permission gating. * Added the Tools-backed checker/removal follow-up via `POST /api/dnsbl/check-ip`, together with the checker-style public delist flow and dashboard/settings warnings when live delete / delist access is still missing. * Added advanced optional CIDR removal flow for permitted tokens, including safe`/ 24`..`/32` validation, plugin-local scan progress, a visible hit list of listed addresses, listed-hit-only delete targeting, sequential per-IP delete requests, and Cloudflare Turnstile verification for live removal-form submissions. * The plugin UI now uses one visible **DNSBL / Tools API token** field, and the** Check token permissions** tool now always asks Tools for a live answer and reports effective DNSBL access more clearly. * Preferred resolver hosts now cover all four canonical DNSBL/FraudBL zones, and migrations merge any missing defaults into existing installs without removing custom hosts. * Shortcode/custom removal pages now expose only the operations allowed by the current token, while the plugin-managed main removal page stays delete-focused. * Token status panels, delisting-page controls, and checker submits now better reflect real delete capability, including explicit IP reposting when the checker has locked the field before submit. * Checker follow-up failures now report clearer backend/API errors for remote ` 419` cases, and write/check diagnostics now distinguish true invalid DNSBL tokens from wrong-token-type or inactive admin-key cases. * Checker-mode Turnstile stays hidden during pre-check/background steps, is enforced on actual write submissions, the Delist button now carries the in-flight submit state itself, and checker/delist requests now also show a dedicated busy spinner row. * CIDR scanning now stays inside WordPress in small local batches so the resolver side is not flooded, while the final delete still goes through the DNSBL write endpoint after the block scan has found at least one listed address and only for the IPs the local scan actually marked as listed, one IP at a time. * If the user clicks **Check if listed** while a valid CIDR is still entered in the first checker IP field, the plugin now opens Advanced automatically, moves the CIDR there, and keeps that Advanced CIDR value as the authoritative range for the later scan/delete flow instead of requiring a separate single-IP anchor. * The admin UI now also shows a dismissible reminder that links directly to the WordPress.org review form for quick feedback. ## Meta * Version **3.1.5** * Zuletzt aktualisiert **vor 3 Monaten** * Aktive Installationen **10+** * WordPress-Version ** 5.8 oder höher ** * Getestet bis **7.0.7** * PHP-Version ** 8.1 oder höher ** * Sprache * [English (US)](https://wordpress.org/plugins/tornevall-networks-dnsbl-implementation/) * Schlagwörter * [antispam](https://de.wordpress.org/plugins/tags/antispam/)[blacklist](https://de.wordpress.org/plugins/tags/blacklist/) [comment spam](https://de.wordpress.org/plugins/tags/comment-spam/)[fraud](https://de.wordpress.org/plugins/tags/fraud/) [User Registration](https://de.wordpress.org/plugins/tags/user-registration/) * [Erweiterte Ansicht](https://de.wordpress.org/plugins/tornevall-networks-dnsbl-implementation/advanced/) ## Bewertungen Es wurden noch keine Rezensionen eingereicht. [Deine Rezension](https://wordpress.org/support/plugin/tornevall-networks-dnsbl-implementation/reviews/#new-post) [Alle Rezensionen anzeigen](https://wordpress.org/support/plugin/tornevall-networks-dnsbl-implementation/reviews/) ## Mitwirkende * [ tornevall ](https://profiles.wordpress.org/tornevall/) ## Support Möchtest du etwas mitteilen? Brauchst du Unterstützung? [Support-Forum anzeigen](https://wordpress.org/support/plugin/tornevall-networks-dnsbl-implementation/)